Ubuntu: 1316-1 Critical T1lib Application Crash Advisory

ubuntu

December 21, 2011

t1lib could be made to crash or run programs as your login if it opened aspecially crafted font file.

Summary

t1lib could be made to crash or run programs as your login if it opened a

specially crafted font file.

Software Description:

- t1lib: Type 1 font rasterizer library - runtime

Details:

Jonathan Brossard discovered that t1lib did not correctly handle certain

malformed font files. If a user were tricked into using a specially crafted

font file, a remote attacker could cause t1lib to crash or possibly execute

arbitrary code with user privileges.

Topics Covered

security advisory critical Ubuntu application crash t1lib

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  libt1-5                         5.1.2-3ubuntu0.11.10.1

Ubuntu 11.04:
  libt1-5                         5.1.2-3ubuntu0.11.04.1

Ubuntu 10.10:
  libt1-5                         5.1.2-3ubuntu0.10.10.1

Ubuntu 10.04 LTS:
  libt1-5                         5.1.2-3ubuntu0.10.04.1

After a standard system update you need to restart your session to make
all the necessary changes.